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METRIC  CONVERSION  FACTORS 


PREFACE 


Technology  Incorporated  prepared  this  first  volume  of  a 
five-volume  report  to  document  the  simulation  logic  for  the  Struc- 
tural Area  Inspection  Frequency  Evaluation  (SAIFH)  in  accordance 
with  Article  II,  paragraph  B of  Contract  DOT-FA74WA-3493 . (Volume 

I along  with  Volume  II  completes  the  requirements  of  Phases  I and 

II  of  the  contract.)  The  effort  is  sponsored  by  the  Aircraft 
Safety  and  Noise  Abatement  Division,  Systems  Research  and  Devel- 
opment Service  of  the  Federal  Aviation  Administration. 

The  principal  Technology  Incorporated  personnel  engaged  on 
tins  program  were  Mr.  Carter  J.  Dinkeloo,  project  engineer,  who 
served  as  principal  investigator;  Mr.  Martin  S.  Moran,  research 
engineer,  who  developed  the  model  for  the  SAIFE  computer  program; 
and  Mr.  Ronald  I.  Rockafellow,  program  manager. 

The  contract  monitors  for  the  FAA  were  Messrs.  Herbert 
Spicer  and  Charles  Troha  of  the  Aircraft  Safety  and  Noise  Abate- 
ment. Division.  The  technical  monitor  was  Mr.  Arnold  ii,  Andcr- 
jaska  of  the  Flight  Standards  Division. 
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It  is  the  mutual  goal  of  the  I:AA,  airframe  manufacturers, 
and  air  carriers  to  constantly  improve  the  structural  integrity 
and  inspection  efficiency  of  civil  aircraft.  The  good  safety 
record  of  11. S.  air  carriers  indicates  that  the  current  process  of 
establishing  and  modifying  structural  inspection  programs  has  been 
successful.  However,  with  the  increasing  size  and  complexity  of 
second-  and  third-generation  transport  aircraft,  there  is  a need 
to  quantify  more  precisely  the  present,  subjective  evaluation 
process  which  relies  heavily  on  reliability  analyses  of  the  new 
design  and  on  operational  experience  of  similar  aircraft. 

Because  of  the  extreme  complexity  of  t ho  evaluation  process, 
a computer  simulation  of  all  critical  aircraft  service  life  as- 
pects was  judged  the  most  rational  means  for  quantifying  the  pro- 
cess more  exactly.  As  a five-volume  document,  this  report  pre- 
sents the  resultant  Structural  Area  Inspection  Frequency  Evalua- 
tion (SAlFli)  simulation  logic,  SAlFli  accounts  for  the  following 
factors:  ( L J aircraft  design  analysis;  (2)  component  and  full- 

scale  fatigue  testing;  (3)  production,  service,  and  corrosion  de- 
fects; (4)  probability  of  crack  or  corrosion  detection;  and  (5) 
aircraft  modification  economics.  It  treats  these  factors  in  a 
logical  sequence  that  realistically  represents  the  procedure  cur- 
rently used  to  establish  and  modify  inspection  intervals.  SAlFli 
is  designed  to  provide  a repeatable  method  for  evaluating  pro- 
posed inspection  programs.  However,  it  is  not  intended  to  supplant 
the  Maintenance  Review  Board  or  the  air  carrier  use  of  the  Stan- 
dard Operations  Specification  - Aircraft  Maintenance.  ■*  * 

In  addition  to  presenting  the  SAlFli  logic,  this  report  docu- 
ments the  research  conducted  to  establish  the  quantitative  func- 
tions required  for  decision  logic  in  the  simulation.  Some  of  the 
documentation  for  these  functions,  such  as  fatigue  life  scatter, 
are  taken  from  work  conducted  in  other  studies.  Other  functions, 
such  as  the  probability  of  defect  detection,  are  the  result  of 
work  conducted  as  part  of  this  contract.  Whatever  the  source, 
all  analytical  information  is  referenced  throughout  the  report. 

Subsequent  to  the  initial  demonstration,  the  model  and 
demonstration  input  was  refined  in  a joint  effort  by  Technology 
Incorporated  and  the  FAA.  The  revised  input  and  model  is  de- 
fined in  appendices  to  Volumes  III  and  IV  respectively.  The 
demonstration  was  rerun  with  the  revised  model  and  input  by 
the  FAA  and  the  results  are  given  in  an  appendix  to  Volume  V. 

Figure  1 illustrates  the  data  sources  and  analytical  func- 
tions that  are  integrated  into  the  SAlFli  logic.  As  Volume  1, 
this  volume  presents  the  basic  method  and  procedure  used  to  de- 
termine the  analytical  functions  and  to  develop  the  logic  required 
for  constructing  the  simulation  and  parametric  study  logic. 
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Volume  II  presents  the  detailed  simulation  logic  incorporated 
in  SAIFE  and  all  the  background  data  required  for  the  analytical 
functions  and  decision-making  processes.  It.  also  includes  the 
data  required  for  a typical  simulation  program. 

Volume  111  presents  data  tabulations  derived  from  studies  to 
determine  historical,  trends.  Conducted  as  part  of  this  contract, 
these  studies  included  processing  Mechanical  Reliability  Reports 
over  a 10-ycar  period  and  conducting  a survey  of  the  experience 
of  air  carrier  maintenance  inspectors.  This  volume  also  contains 
the  design  input  data  required  for  a SAlh'fi  demonstration  problem 
and  parametric  study. 

Volume  IV  is  the  user's  manual  for  the  SAIFE  computer  pro- 
gram. It  includes  software  logic  flow  diagrams  for  each  routine 
and  event,  in  the  program  developed  during  the  initial  contract  ef- 
fort plus  subsequent  parametric  studies  and  .also  includes  a 
source  listing  of  the  program  which  is  wrilfen  in  the  computer 
language  S1MSCRIPT  1 I . 5 CU  . 


Volume  V summarizes  and  evaluates  the  results  of  a demon- 
stration computer  run  conducted  on  a typical,  but  hypothetical, 
wide-body  aircraft.  This  volume  discusses  revisions  to  the 
program  logic  as  well  as  the  demonstration  and  parametric  study 
output . 
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Figure  1.  Approach  to  SAIFE  Simulation  Problem 
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1 1 • SIMULATION  OB.rnCTlVP.S 
1 . SM  i;b_  Apj'  I i c a t ions 

The  primary  objective  of  the  SAIhi-  project'  was  to  develop  a 
program  Tor  evaluating  inspection  intervals.  Since  this  develop- 
ment was  a first  attempt  to  simulate  the  evaluation  process,  it 
was  also  intended  to  develop  a program  with  sufficient  flexibil- 
ity to  permit  its  application  to  related  studies,  such  as  the 
effect  of  material  selection  on  aircraft  safety  and  the  relative 
cost  of  repairing  or  modifying  an  airframe  structure. 

The  primary  objective,  evaluating  inspection  intervals,  cun 
he  accomplished  by  two  different  approaches.  first,  since  SAITb 
automatically  increases  or  decreases  inspection  intervals,  a pro- 
posed set  of  intervals,  along  with  the  desired  increase  or  decrease 
percentages,  can  ire  specified.  'The  simulation  output  will  be  a 
series  of  altered  intervals  that  will  successively  increase  or 
decrease  depending  on  the  number  and  criticality  of  the  defects 
generated  during  the  simulation.  Steadily  increasing  or  decreas- 
ing intervals  probably  indicate  that  the  initial  intervals  should 
bo  re  - examined  and  revised  prior  to  being  implemented.  Constantly 
fluctuating  intervals  may  indicate  a proper  choice  of  initial  .in- 
tervals, although  a change-by-change  analysis  of  the  results  is 
undoubtedly  in  order. 

The  second  approach -involves  specifying  a zero  increase  or 
decrease  percentage  and  making  parallel  simulation  runs  with  two 
or  more  sets  of  inspection  intervals.  Specifying  a zero  percen- 
tage change  will  prevent  automatic  interval  changes  and  conse- 
quently permit  a comparison  of  the  number  of  defects  occurring  as 
a result  of  each  set  of  intervals.  A variation  of  this  approach 
would  be  to  maintain  one  set  of  inspection  intervals,  but  to 
change  the  lowest  interval  that  applies  to  an  area  to  be  inspected, 
for  Instance,  certain  accessible  portions  of  the  wing  interior 
might  be  moved  from  the  C interval  to  the  B interval.  The  effects 
of  this  change  could  be  evaluated  after  making  parallel  simulation 
runs  and  comparing  the  number  of  resulting  defects. 

The  input  and  output  formats  of  the  simulation  permit  eval- 
uating inspection  intervals  and  other  variables  on  problems  of 
varying  size.  Volume  V of  this  report  presents  an  evaluation 
of  a demonstration  which  encompassed  an  entire  wide -body  aircraft. 
An  evaluation  of  this  extent  is  most  likely  to  he  made  during  the 
certification  process  for  a new  aircraft  model,  such  as  the  B-/47. 

[•valuations  of  smaller  scope  may  be  made  when  only  a discrete 
portion  of  an  aircraft  has  been  modified,  the  IK, -9  fuselage  stretch 
for  example.  In  such  an  evaluation,  the  simulation  may  .include 
only  the  fuselage  with  the  unmodified  portions  of  t ho  aircraft 
d isrega rded . 
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Simulation  runs  may  also  be  conducted  on  individual  compo- 
nents only.  In  such  runs  one  or  two  problem  areas  on  the  wing, 
for  instance,  may  be  evaluated,  and  have  their  inspection  inter- 
vals reduced  while  leaving  those  for  the  rest  of  the  wing  the 
same  as  before. 

Because  of  the  flexibility  of  the  simulation  program,  pri- 
marily in  the  area  of  input  parameters,  several  different  stages 
in  an  aircraft's  life  cycle  may  he  evaluated.  During  the  initial 
design  stage  the  effect  of  material  selection  can  he  evaluated  by 
conducting  comparative  simulation  runs  with  various  fatigue 
lives,  crack  growth  rates,  and  corrosion  resistance  ratings. 

This  type  of  design  evaluation  c.-n  also  lie  conducted  when  indi- 
vidual components  are  being  modified  or  redesigned. 

Cost  evaluations  can  he  conducted  with  S A 1 I ■' H when  a repair 
or  modification  decision  is  required  since  the  simulation  logic 
compares  the  one-time  cost,  of  modification  with  the  repeated  cost 
of  repair  and  possibly  increased  inspection  costs. 

2 . SAIPE  Output 

Por  each  element  simulated,  SA 1 PI!  generates  the  number  of 
defects  - cracks,  corrosion,  service  damage,  and  production 
damage  - that  occur  during  the  service  life  of  the  aircraft. 
P.xcept  for  production  damage,  the  minimum,  maximum,  and  average 
flight  hours  at.  which  the  defects  occur  are  also  presented. 

Since  production  damage  does  not  depend  on  flight  time,  only  the 
number  of  occurrences  is  presented. 

The  simulation  output  also  includes  the  number  of  cracks  and 
corroded  areas  detected.  These  numbers  permit  making  a compar- 
ison between  the  defects  which  occurred  and  those  which  were  de- 
tected. Tf  the  two  do  not  agree,  either  multiple  defects  were 
present  in  an  element  and  all  were  repaired  when  one  was  detected 
or  defects  were  not  detected  before  the  aircraft  was  retired. 

The  minimum,  maximum,  and  average  sixes  of  the  defects,  along 
with  the  number  of  defects  detected,  are  presented  for  each 
inspection  level. 

The  output,  for  individual  elements,  as  exemplified  in  Tables 
1 and  3,  presents  the  initial  set  of  inspection  intervals  which 
is  input,  information  and  each  subsequent  change  to  the  C,  and  D 
intervals  made  by  the  SAU’E  logic. 

The  output  for  individual  elements  also  contains  flight  hour 
and  aircraft  identification  information  whenever  tho  residual 
strength  equaled  the  fail-safe  strength,  often  referred  to  as 
fail-safe  damage.  Flight  hour  and  aircraft  identification  infor- 
mation is  also  presented  for  each  element  that  had  a structural 
fail urc . 
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The  simulation  output  for  individual  elements  is  summarized 
by  element  to  provide  pertinent  information  in  less  voluminous 
form.  Tables  2 and  4,  examples  of  this  output  form,  summarize 
the  defects  that  occurred  and  those  that  were  detected  for  an 
element  type. 

The  output  also  contains  information  on  inspection  interval 
hut  instead  of  listing  each  change  in  the  interval,  it  presents 
only  the  initial,  shortest,  and  largest  intervals  that  occurred 
on  any  one  of  the  individual  elements. 

The  output  for  fail-safe  damage  and  structural  failure  is  a 
list  of  all  instances  when  these  events  occurred  on  any  element 
of  a particular  element  type.  Again  flight  hour  and  aircraft 
identification  information  are  included,  and  the  clement  station 
number  has  been  added  to  identify  the  specific  element. 

The  SAIFH  output  provides  information  that  will  assist  qual 
ified  I-'AA  personnel  in  making  decisions  on  a proposed  inspection 
plan  by  showing  the  results  of  that  plan  in  terms  of  the  number, 
extent,  flight  hours,  and  criticality  of  the  defects  that  prob- 
ably will  occur  if  the  plan  is  implemented. 
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III.  APPROACH  TO  THH  SIMULATION  PROBLEM 
1 . Background 

Structural  inspection  and  maintenance  programs  account  for  a 
significant  portion  of  the  operating  cost  of  a commercial  trans- 
port aircraft.  Initially  the  inspection  program  for  a particular 
aircraft  type  is  developed  by  the  Maintenance  Review  Board  (MR  11) 
during  the  certification  process.  Subsequently,  as  fleet  experi- 
ence is  gained,  the  inspection  program  is  modified  after  a Stan- 
dard Operating  Specification  - Aircraft  Maintenance  has  been  sub- 
mitted by  the  air  carrier  and  approved  by  the  federal  Aviation 
Administration.  The  resulting  inspection  program  is  based  on 
subjective  analyses  that  account  for  historical  experience  on 
previous  aircraft  types,  experience  on  the  present  aircraft,  and 
design  data  on  the  present  aircraft.  The  success  of  this  procedure 
is  evidenced  by  the  excellent  safety  record  of  IJ . S . air  carriers. 

However,  with  the  pressure  on  air  carriers  to  continue  to 
operate  on  a profitable  basis  and  the  continued  responsibility  of 
the  PA A to  improve  air  transport  safety,  the  inspection  intervals 
for  primary  aircraft  structures  must  be  determined  on  a more  ob- 
jective basis.  In  response  to  this  need,  the  1:AA  initiated  the 
SAIlHi  (Structural  Area  Inspection  frequency  Evaluation)  project. 

The  objective  of  this  project  was  to  assemble  all  the  logic  cur- 
rently used  to  establish  inspection  frequencies  into  a single 
simulation  program  that  would  be  capable  of  investigating  tiie 
interactions  between  the  primary  aircraft  service  life  factors: 
ultimate  strength,  fatigue  life,  flight  loads,  production  and 
service  damage,  corrosion,  probability  of  defect  detection,  and 
modification  economics.  Tiie  simulation  would  then  permit  deter- 
mining the  effect  of  changing  an  economic  parameter,  suc.li  as 
inspection  interval,  on  the  overall  safety  of  the  aircraft  fleet. 
The  judgment  of  what  could  be  an  acceptable  level  of  aircraft 
safety,  of  course,  still  rests  with  the  i'AA. 

Since  this  approach  differs  significantly  from  those  cur- 
rently used  to  evaluate  inspection  intervals,  it  was  felt  that  a 
high  degree  of  flexibility  was  required.  The  primary  provisions 
for  this  flexibility  are  the  means  for  defining  the  .life  charac- 
teristics of  each  element  from  input  data  instead  of  from  pre- 
determined program  constants  and  the  means  for  evaluating  an 
entire  aircraft,  a large  segment  of  an  aircraft,  or  an  individual 
element . 

Because  of  the  complexity  of  the  logic  involved  in  determin- 
ing the  inspection  program  for  a commercial  aircraft  fleet,  it  ls 
not  possible  to  develop  one  or  even  a set  of  deterministic  equa- 
tions. Therefore,  SAIFIi  uses  a series  of  probabilistic  distri- 
butions and  deterministic  equations  to  simulate  a logic  sequence 
that  considers  all  the  subjective  elements  currently  considered 
in  arriving  at  an  inspection  program.  Based  on  the  logic  devel- 
oped by  Anderiaska  in  Reference  1,  the  simulation  is  intended  to 
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handle  large  aircraft  fleets  by  determining  the  outcome  of  proba- 
bilistic events  for  individual  aircraft  from  a random  number  al- 
gorithm. This  procedure  is  commonly  referred  to  as  a Monte  Carlo 
technique . 

2.  Computer  Simulation  Language 

The  complexity  and  magnitude  of  the  proposed  project  re- 
quires using  the  most  efficient  techniques  aval  1 abl e . The  com- 
puter simulation  language  SIMSCR1PT  1 1 . 5 CD  is  ideally  suited  to 
this  project  since  it  is  designed  to  handle  simulations  where 
hundreds  of  events  are  happening  concurrently  and  in  a chrono- 
logical sequence  such  as  in  the  SAIEl;  application. 

SLMSCRII’T  is  also  a desirable  computer  language  from  the 
user's  viewpoint  since  its  frec-form  English  format  makes  it  easy 
to  interpret  the  source  program  and  it  reduces  the  coding  and  de- 
bugging effort.  In  addition,  S1MSCRIPT  provides  system  functions 
to  generate  the  random  numbers  required  in  SAIFl'i. 

The  SAlEli  computer  program  has  been  written  to  operate  on 
both  the  IBM  360/65  and  CUC  6600  computers  equipped  with  a 
S1MSCR1PT  1 1 . 5 compiler. 

3 . Mon te_  Carlo  Method 

When  a system  to  be  simulated  is  so  complex  that  its  opera- 
tion cannot  initially  be  analytically  expressed,  whether  deter- 
ministically or  probabilistically,  gaming  techniques  are  used  to 
simulate  the  sys  em  systematically,  frequently  the  simulation  is 
divided  into  parts,  each  described  by  a frequency  distribution  or 
an  algebraic  formula.  Entirely  numerical,  the  calculation  pro- 
cess consists  of  supplying  numbers  to  the  system  and  of  obtaining 
resultant  numbers  from  it.  Often  the  numbers  supplied  are  random 
numbers  obtained  from  a published  table,  dice,  computer,  or  any 
device  uniformly  producing  random  numbers  such  as  a roulette 
wheel;  hence  the  name  Monte  Carlo  for  such  a device  and  the 
corresponding  method.  These  numbers  are  fed  into  the  system  as 
cumulative  probabilities  such  as  a fatigue  life  distribution.  A 
Monte  Carlo  treatment  of  a problem  permits  testing  statistically 
the  sensitivity  of  the  result  and  isolating  the  influence  of  a 
single  parameter.  To  aid  in  the  modeling  of  statistical  phenom- 
ena, the  computer  simulation  language  SIMSCRIPT  11.5  provides 
eleven  system  functions  for  generating  independent,  pseudo-random 
samples  from  commonly  encountered  statistical  distributions. 

The  samples  are  considered  to  be  pseudo  - random  because  they 
are  determined  from  an  algorithm  that  is  repeatable.  Therefore, 
the  algorithm  is  technically  not  a pure  random  number. 

In  the  simulation  each  of  these  functions  has  as  its  argu- 
ments (1)  the  parameters  that  describe  the  distribution  and  (2)  a 
random  number  stream  index.  Each  time  one  of  the  functions  is 
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called,  a random  number  is  generated  from  the  indicated  stream,  and 
an  appropriate  transformation  is  made  to  convert  the  number  to  the 
correct  sampling  distribution.  If  the  statistical  distribution  of 
interest  is  not  available,  it  can  easily  be  generated  from  the 
uniform  distribution.  In  principle,  all  that  is  required  is  to 
equate  the  two  cumulative  distributions: 


X 

RN 

/ f (x)  dx  = 

/ 1 • d (RN j 

(1) 

0 

0 

and 

F(x) 

= RN 

(2) 

where  RN  = 

a random  number  drawn 

from  a uniform  distribution 

P (x)  - desired  cumulative  distribution  of  the  random 
variable  x 


Thus,  if  the  inverse  function  of  F(x)  can  be  determined,  the  de- 
sired distribution  of  random  numbers  is  readily  available: 

x - p - 1 F(x)  » F* 1 (RN)  (3) 


However,  for  functions  whose  inverse  cannot  be  analytically  de- 
termined, approximation  techniques  can  be  used  to  generate  the 
desired  distribution  of  random  numbers. 


4 . Probability  Model 

The  SAIFE  simulation  logic  is  based  on  dividing  the  primary 
aircraft  structure  into  basic  elements,  such  as  wing  spar  and  fuse- 
lage frame,  and  then  determining  the  time  to  crack  and/or  corro- 
sion initiation  for  each  element.  The  logic  then  projects  the 
time  to  failure  of  the  element  considering  the  effects  of  such 
random  environmental  phenomena  as  flight  loads,  and  production 
and  service  damage.  As  discussed  in  Section  III. 3,  the  straight- 
forward application  of  the  Monte  Carlo  method  generates  these 
times  when  the  probability  density  function  of  the  times  to  fail- 
ure is  known.  However,  since  this  function  is  seldom  known,  the 
Monte  Carlo  method  may  be  modified  if  the  hazard  rate,  Aft),  for 
the  random  environmental  phenomena  can  be  determined. 

The  following  discussion  treats  the  situation  where  a struc- 
ture has  a fatigue  crack  initiation  at  time  t = 0 and  the  objective 
is  to  know  the  probability  of  failure  before  time  t.  If  the  struc- 
ture has  not  failed  up  to  time  t,  then  the  probability  of  failure 
in  the  time  interval  between  t and  t + dt  may  be  expressed  in 
probability  theory  as 
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where  F'(t  + dt|t  _>  t)  = probability  of  failure  before  time  t + dt, 

assuming  nonfailure  before  time  t 

i'(t  +•  dt)  = probability  of  failure  before  time  t + dt 

F(t)  = probability  of  failure  before  time  t 

1 - F ( t ) = probability  of  nonfailure  before  time  t 

Dividing  and  multiplying  the  right  side  of  liquation  (4)  by  dt 
yields 

F(t  + dt  1 1 > t)  - T~jrjYj  (5) 


U l -ill. 

p(t  * ant  > t)  - rTiFTtT  dt  w 

Now  let 

r~TTtT  3T  ACt)  (7^ 

where  A(t),  called  the  hazard  rate,  may  be  interpreted  as  (1)  the 
probability  per  unit  of  time  that  an  item  will  fail  in  the  next 
small  interval  of  time  if  it  has  not  failed  before  the  start  of  the 
interval  or  (2)  the  number  of  items  failing  per  unit  of  time  di- 
vided by  the  number  intact  at  the  beginning  of  the  interval.  From 
probability  theory, 


f(t)  = dF£tl  (8) 

where  f(t)  is  the  probability  density  function.  Substitution  of 
liquation  (8)  into  Equation  (7)  yields 

A CO  = (9) 


where  R(t)  is  the  probability  of  nonfailure  before  time  t.  Rewrit- 
ing Equation  (7)  gives 


d_F 

dt 


+ 


AF 


A 


(10) 
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Equation  (1)  is  an  exact  differential  equation  and  may  be  solved  by 
integration.  Rewriting  Equation  (10)  yields 


dF  _ w,  n 

ar  -Mf'-i) 


(ii) 


or 


F-l  = Ce 


/X (t)dt 


(12) 


Therefore , 


F(t)  - 1 + C e 


- / Xdt 


(13) 


Applying  the  boundary  condition  F ( 0 ) a 0 to  Equation  (13)  yields 
C = -1,  Equation  (13)  then  becomes 


F(t)  = 1 - e 


■/ X (t)dt 


(14) 


where  F(t)  is  the  cumulative  distribution  function  of  times  to 
failure.  Now  the  Monte  Carlo  method  can  be  used  to  generate  a 
stream  of  random  times  to  failure.  Drawing  a random  number  from  a 
uniform  distribution  with  range  0 to  1 and  equating  it  to  F(t)  in 
Equation  (14)  yields 

t 

-/  X (t ) dt 

RN  = 1 - e 0 (15) 


Then  the  indicated  integration  is  performed,  and  t is  solved  for  in 
terms  of  the  random  number  RN.  This  technique  can  be  used  to 
generate  the  times  for  any  phenomenon  whose  hazard  rate  A(t)  can  be 
determined.  The  hazard  rate  can  be  either  a constant  or  a function 
of  time.  Figure  2 represents  the  basic  relationships  indicated  in 
Equation  (15)  as  applied  to  a fuselage  stringer  element. 


Select random 

FCt)  .. 

number 

1 j 

1 

s'  Determine  time 

/ of  eli 

iment 

i: 

/ failure 

L L _ 

1 

► 

IV. 


SIMULATION  LOGIC 


The  eight  blocks  in  Figure 
the  SAIFE  simulation  logic.  As 
whose  numbering  correlates  with 
contains  one  or  two  basic  ideas 


3 represent  the  major  aspects  of 
detailed  in  the  following  sections, 
the  block  numerals,  each  block 
in  the  simulation  logic. 


Figure  3.  Flow  Diagram  Showing  Major  Aspects  of  SAIFE  Logic 
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1 • Input  Data/Generate  Fatigue  Lives  (Block  1) 

The  input  data  can  be  divided  into  threo  categories:  fleet 
information,  aircraft  design  data,  and  historical  data.  The  fleet 
information  identifies  the  type  of  aircraft,  for  example,  H - 7 4 7 ; 
the  number  of  aircraft  in  the  fleet;  and  the  expected  service  life 
of  the  aircraft. 

The  aircraft  design  data  includes  a complete  detailed  break- 
down of  the  aircraft  structure  into  its  basic  elements.  Two  ele- 
ment types,  a wing  stringer  and  a fuselage  frame,  are  illustrated 
in  Figure  4.  With  such  a structural  breakdown,  the  fatigue  life, 
ultimate  strength,  crack  growth  rate,  corrosion  resistance,  and 
corrosion  growth  rate  of  each  element  must  he  determined.  Since 
all  these  parameters  have  a direct  effect  on  the  inspection  in- 
terval to  be  evaluated,  the  more  accurately  they  are  defined,  the 
more  valid  the  final  evaluation  will  be.  The  input  data  for  a 
demonstration  problem  is  documented  in  Volume  III  of  this  report. 


Figure  4.  Typical  Aircraft  Elements  Used  in  the  SA1FH  Simulation 


In  many  instances,  historical  information  is  the  only  source 
of  data  that  is  useful  for  defining  operational  factors.  Of  par- 
ticular interest  are  the  corrosion  occurrence  rate,  the  service 
damage  occurrence  rate,  and  the  production  defect  occurrence  rate. 
The  source  of  such  information  is  the  Mechanical  Reliability  Report 
(MRR) , called  the  Service  Difficulty  Report  (SDR)  after  1972.  All 
U.S.  air  carriers  ure  required  by  regulation  to  submit  an  MRR/SDR 
whenever  they  find  and  repair  a dofect.  Volume  III  presents  the 
MRR/SDR  data  covering  the  10-year  period  from  1963  through  1973 
which  was  analyzed  during  the  current  program  for  the  SAIFE  pro- 
ject. Information  on  catastrophic  and  non-catastrophic  accidents 
was  obtained  from  the  National  Transportation  Safety  Hoard  (NTSB) 
Aircraft  Accident  Reports. 


Since  in  practice  a 
tigue  life  prediction  ana 
turc  of  a given  design  wi 
predicted.  The  probubili 
greater  or  less  than  that 
(Reference  2).  The  relat 
trated  in  Figure  5.  The 
tributional  relationship 
user  of  SAIFB  to  account 
techniques.  An  example  o 
analysis  techniques  is  al 


statistical  approach  is  not  used  in  fa- 
lysis,  the  actual  fatigue  life  of  a struc- 
11  usually  differ  from  that  analytically 
ty  of  the  actual  fatigue  life  being 
predicted  was  studied  by  K.D.  Raithby 
ionship  determined  by  Raithby  is  illus- 
mean  and  standard  deviations  of  this  dis- 
are  input  parameters  which  enable  the 
for  improvements  in  fatigue  analysis 
f the  relationship  resulting  from  improved 
so  shown  in  Figure  5. 


LIFE  OVERESTIMATED  LIFE  UNDERESTIMATED 


=2  100 
a i 
> 
o 

g 

fc  80 


LEGEND 

RAITHBY 

CURRENT 

ANALYSIS 

R :andomnu  mber_select  I on 

OF  0.75"  ~ < 


-J-U 


(RESULTS  IN  ANR  OF 

11,  10  FOR  CURRENT  ANALYSIS 


RESULTS  IN  AN  R OF 

0,  84  FOR  THE  RAITHBY  ANALYSIS 

I ! 


1.0 

ACTUAL  LIFE 


PREDICTED  LIFE 


Figure  S.  Comparison  of  Predicted  and  Actual  Fatigue  Life 


For  each  element  the  Monte  Carlo  method  is  used  to  select  a 
predicted  life  multiplier,  R.  The  actual  average  fatigue  life  is 
then  determined  from  the  equation 

Actual  Fife  = Predicted  Fife  x R fit)] 

The  example  illustrated  in  Figure  5 shows  that  a random  number 
selection  of  0.75  results  in  a predicted  life  multiplier  of  0.84 
for  the  "Raithby"  curve  and  L.l  for  the  "Current  Analysis"  curve, 

It  is  a well-established  fact  that  the  fatigue  lives  of  a 
group  of  nominally  identical  elements  are  not  deterministic;  con- 
sequently, they  must  be  defined  by  a probabilistic  distribution. 
Further,  it  has  been  established  that  the  probabilistic  distri 
bution  of  fatigue  lives  for  elements  on  operational  aircraft  is 
primarily  a function  of  two  variables:  basic  material  fatigue 
scatter  and  operational  environment  variation.  Investigations 
conducted  by  Freudenthai  (Reference  5)  and  Abelkis  (Reference  4) 
conclude  that  both  of  these  effects  can  be  accounted  for  by  a 
single  distribution.  Although  the  exact  mathematical  formulation 
of  the  distribution  is  different  in  each  of  the  studies,  the  end 
results  are  similar.  The  SAIPJ;  logic  uses  the  two-parameter  We i - 
bull  distribution  developed  by  Freudenthai.  Although  not  as  ac- 
curate at  the  extreme  values  as  the  distribution  developed  by 
Abelkis,  the  two -parameter  Weibu.ll  distribution  is  more  flexible 
and  can  bo  more  easily  modified  to  account  for  any  changes  in 
material,  technology. 

After  the  average  fatigue  life  of  an  clement  has  been  de- 
termined, the  fatigue  life  for  each  element  in  ouch  aircraft  can  be 
determined  by  deriving  a probabilistic  distribution  according  to 
Freudenthai 1 s technique  and  then  applying  the  Monte  Carlo  method  to 
this  distribution  to  select  the  desired  fatigue  life.  Figure  b 
illustrates  this  procedure. 

A unique  fatigue  life  is  determined  for  each  element  in  each 
aircraft  as  the  aircraft  is  introduced  into  service.  As  illus- 
trated in  Figure  6,  if  a random  number  of  0.750  is  selected,  the 
fatigue  life  of  the  individual  element  is  1.05  times  the  previously 
determined  average. 

2 . Develop  Modification  Because  of  Fatigue  Test  Fai lure  (Block  2) 

One  of  the  criteria  used  In  the  design  of  commercial  jet 
transports,  particularly  the  wide-body  aircraft,  is  an  average 
fatigue  life  for  the  airframe  that  would  be  twice  the  service 
life.  This  criterion  was  used  on  the  DC-10  (Reference  5j  and  on 
the  B-747  (Reference  6).  Because  of  the  demonstrated  uncertainty 
of  fatigue  life  prediction,  fatigue  tests  (such  as  illustrated  in 
Figure  7)  are  routinely  conducted  on  airframe  sections  and  com- 
ponents and  occasionally  on  full-scale  aircraft.  The  results  of 
these  tests  are  used  to  determine  whether  the  airframe  should  be 
modified. 


17 


CUMULATIVE  FATIGUE  LIFE  DISTRIBUTION 
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Figure  6.  Cumulative  Distribution  of  Fatigue  Lives  Using 
Parameter  Weibull  Distribution 
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The  SAII'H  logic  simulates  the  fatigue  test  by  assuming  that 
the  fatigue  test  failure  occurs  after  a test  period  equal  to  the 
actual  average  fatigue  life  determined  in  Block  1 divided  by  the 
fatigue  test  acceleration  factor.  If  the  actual  average  fatigue 
life  is  less  than  twice  the  service  life  when  a fatigue  test  fail- 
ure occurs,  a production  modification  is  developed.  If  the  actual 
average  fatigue  Life  is  less  than  the  service  life,  a retrofit 
modification  is  developed  for  those  aircraft  already  in  service, 
and  the  inspection  frequency  of  the  particular  element  is  increased 
from  the  time  the  clement  reaches  80%  of  its  actual  average  fatigue 
life  to  the  time  that  the  element  is  either  modified  or  repaired. 
The  interval  between  the  time  that  a fatigue  test  failure  occurs 
and  the  time  that  the  clement  modification  is  installed  is  the  lead 
time  required  to  design  the  modification,  procure  materials  and/or 
parts,  and  fabricate  the  modification.  The  lead  time  also  includes 
the  time  required  to  fatigue  test  the  modification,  if  such  testing 
has  been  specified.  Whether  or  not  a modification  must  be  so 
tested  is  a decision  that  is  part  of  the  data  input  required  at  the 
start  of  the  simulation. 

If  a modification  is  tested,  it  is  assumed  that  it  will  he 
redesigned  and  retested  until  the  actual  average  life  is  at  least 
equal  to  the  predicted  average  life.  If  the  modification  is  not 
tested,  then  it  is  assumed  that  the  actual  average  life  will  be 
subject  to  tlie  same  uncertainties  as  the  original  design  and, 
therefore,  must  be  determined  by  the  same  distribution  as  discussed 
above  and  indicated  in  Block  1 and  Figure  5.  Once  the  actual 
average  fatigue  life  is  determined,  the  logic  returns  to  Block  1, 
where  the  actual  fatigue  life  of  each  modified  element  is  deter- 
mined as  previously  discussed. 

3 . Reduce  Fatigue  Life  Because  of  Production,  Service,  or 

Cor  ro s ion  De  f ec ~t  s~(BTbck  3 ) 

The  previous  blocks  provide  the  means  of  determining  the  fa- 
tigue life  that  could  be  expected  of  each  individual  element  under 
ideal  conditions.  However,  the  effect  of  production  defects, 
service  damage,  and  corrosion  must  be  accounted  for.  Since  these 
factors  cannot  be  realistically  duplicated  in  a laboratory  or  dur- 
ing a controlled  experiment,  MRR/SDR  data  was  used  to  construct 
their  occurrence  rates.  From  this  information,  the  following  may 
be  defined:  (1)  the  rate  at  which  production  defects  occur,  (2) 
the  rate  at  which  service  damage  occurs,  (3)  the  rate  at  which 
corrosion  occurs,  (4)  the  rate  at  which  corrosion  grows,  (5)  the 
effect  of  production  defects  on  fatigue  life,  and  (6)  the  effect  of 
service  damage  on  fatigue  life. 

Figure  8 shows  the  distribution  of  fatigue  lives  for  elements 
that  have  been  subject  to  production  damage.  This  figure  indicates 
that  the  average  fatigue  life  has  been  substantially  reduced. 
Therefore,  when  it  has  been  determined  that  an  element  has  been 
subject  to  production  damage,  the  SAIFE  logic  selects  a revised 
fatigue  life  for  that  individual  element  by  applying  the  Monte 
Carlo  method  to  the  distribution  shown  in  Figure  8. 
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Elements 


Figure  9 is  a histogram  of  time  to  service  damage  occurrence 
constructed  from  MRR/SDR  data.  This  figure  indicates  that  service 
damage  is  a uniformly  occurring  random  event  independent  of  air- 
craft service  time.  The  Monte  Carlo  method  is  used  to  generate 
time  to  service  damage  occurrence  from  a uniform  distribution.  The 
SAIFE  logic  treats  service  damage  and  the  resulting  crack  ini- 
tiation as  occurring  simultaneously. 


Figure  9.  Histogram  of  Crack  Occurrences  on  Servi ce- Damaged 
Elements 
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A study  conducted  by  the  Naval  Air  Engineering  Center  (Ref- 
f erence  7)  provides  the  weans  for  determining  the  effect  of  corro- 

j slon  defects  on  fatigue  life.  This  study,  which  compared  the  fa- 

" I tigue  lives  of  wing  spars  taken  from  previously  operational  I lU  - 1 (> 

aircraft  with  the  fatigue  lives  of  newly  manufactured  spars,  con- 
M eluded  that  approximately  301  of  the  fatigue  life  reduction  in  the 

;}  corroded  spars  was  due  to  operational  usage.  In  spars  with  surface 

. I pitting  and/or  light  exfoliation,  there  was  no  fatigue  life  reduc- 

j tion  due  to  corrosion;  but,  in  spars  with  severe  exfoliation,  the 

v } fatigue  life  reduction  was  at  least  401.  The  study  further  indi- 

j cates  that,  severe  exfoliation  is  found  almost  exclusively  in  stress 

concentrations  such  as  those  at  fastener  holes. 

For  each  of  the  documented  corrosion  occurrences  in  the  MRU/ 
i SDR  data,  the  reported  corrosion  size  was  plotted  as  a function  of 

the  corrosion  detection  time.  A corrosion  growth  rate  was  then 
postulated  by  constructing  a line  between  the  origin  and  one  of  the 
data  points  such  that  parallel  growth  rate  lines  passing  through 
i each  of  the  other  data  points  yield  no  negative  times  to  corrosion 

; initiation.  This  is  a somewhat  conservative  approach  in  that  it 

allows  corrosion  to  initiate  as  soon  as  an  aircraft  enters  service. 

; knowing  the  growth  rate  and  time  of  detection,  the  number  of  cor- 

iy  rosion  occurrences  versus  time  of  initiation  may  be  plotted.  A 

j typical  cumulative  distribution  of  times  to  corrosion  initiation 

r‘  j is  shown  in  Figure  10.  With  such  a distribution,  the  Monte  Carlo 

f method  was  used  to  generate  a time  to  corrosion  initiation  for 

: { each  of  the  structural  elements. 

h I The  fatigue  life  reduction  of  a structural  element  resulting 

! from  corrosion  depends  on  the  state  of  stress  in  the  corroded  area. 

I j The  probability  that  corrosion  exists  in  a stress  concentration  is 

; ; equal  to  the  ratio  of  the  number  of  corrosion  occurrences  found  in 

tress  concentrations  to  the  total  number  of  corrosion  occurrences 
/ identified  in  that  structural  element  type  within  the  fleet.  For 

each  incident  of  corrosion,  if  a random  number  drawn  from  a uniform 
distribution  is  less  than  the  appropriate  probability  of  corrosion 
occurrence  in  a stress  concentration,  the  corrosion  is  assumed  to 
occur  in  a stress  concentration;  otherwise,  it  is  assumed  to  occur 
in  a uniform  stress  field. 


4. 


'"lie  previous  blocks  provide  the  means  for  establishing  the 
fatigue  life,  the  time  of  crack  initiation,  for  each  element.  In 
Block  4 after  the  growth  of  the  crack  and  the  growth  of  possible 
corrosion  are  considered,  the  resulting  strength  reduction  is 
compared  with  the  loads  expected  on  the  airframe.  The  crack 
growth  rate  is  determined  from  specimen  and  large -component  tests 
conducted  on  typical  airframe  sections.  This  rate  depends  on  de- 
sign, material  selection,  and  load  environment.  All  of  these 
factors  are  accounted  for  by  selecting  an  average  growth  rate  from 
a component  test  that  closely  resembles  the  design  of  the  given 
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Reduce  Strength  Because  of  Crack  or  Corrosion  Growth/Predict 
T i m e to  Fa i.  lure  (Block  4] 


element  and  then  by  considering  that  each  individual  element  falls 
within  a normal  distribution.  The  validity  of  this  procedure  was 
proved  by  liggwertz  (Reference  8). 


FLIGHT  HOURS  TO  CORROSION  INITIATION  (t0) 

Figure  10.  Typical  Cumulative  Distribution  of  Corrosion  Occurrence 


The  Navy  study  with  wing  spars  (Reference  7)  concluded  from 
tensile  strength  tests  that  the  ultimate  strength  of  the  spar  was 
not  affected  by  corrosion.  This  conclusion  is  also  supported  by 
Jackman's  investigation  (Reference  9).  It  may  be  assumed,  there- 
fore, that  corrosion  on  commercial  transports  will  always  be  de- 
tected before  the  ultimate  strength  is  affected.  The  only  in- 
stances of  structural  failure  being  attributed  to  corrosion  have 
occurred  on  prop  or  turboprop  aircraft  that  were  not  protected  by 
advanced  corrosion  resistant  materials  and  preventive  coatings. 

As  indicated  in  the  foregoing  discussion,  the  strength  reduc- 
tion due  to  fatigue  cracking  is  compared  with  the  load  environment 
to  determine  the  time  of  element  failure.  The  load  environment  is 
the  sum  of  gust  and  maneuver  acceleration  loads  on  the  wing  and 
fuselage  elements.  The  flight  loads  used  in  SAIFE  are  based  on 
2000  flight  hours  of  VGH  (airspeed,  normal  acceleration,  altitude) 
data  recorded  on  commercial  transport  aircraft  and  reported  by  NASA 
(Reference  10). 
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The  time  to  failure  of  each  element  is  calculated  by  the 
reliability  formula,  Equation  (15),  discussed  in  Section  III. 4.  If 
the  time  to  failure  is  greater  than  the  aircraft  service  life,  the 
simulation  retires  the  aircraft  from  service  and  returns  to  Block 
1. 

5.  Periodic  Inspection  of  Element s/ Aircraft  Deleted  from  fleet 
TBloclc  5) 

This  block  covers  the  periodic  inspection  of  a commercial 
transport  aircraft.  It  includes  four  levels  of  inspection.  As 
each  inspection  level  is  called  during  the  simulation,  a decision 
on  whether  or  not  an  existing  defect,  either  crack  or  corrosion,  is 
found  depends  on  the  probability-of-detection  curves  in  Figures  1.1 
and  12  and  on  a random  number  selection.  The  formulation  of  these 
curves  was  based  on  data  obtained  from  a survey  of  maintenance 
inspectors  and  on  an  analysis  of  actual  defects  detected  in  MRR/SDR 
data.  If  a defect  is  detected,  the  logic  proceeds  directly  to 
Block  6;  if  a defect  is  not  detected,  the  simulation  performs 
additional  scheduled  inspections.  The  detection  sequence  is  re- 
peated at.  each  subsequent  inspection  until  a defect  is  found,  the 
aircraft  is  retired  from  service,  or  a structural  failure  occurs. 

If  a defect  is  detected,  the  logic  goes  to  the  repair  block;  if  a 
structural  failure  occurs,  the  aircraft  is  deleted  from  the  fleet. 


C RACK  LENGTH  (in.) 

Figure  11.  Probability  of  Crack  Detection 
During  a Periodic  Inspection 
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Figure  12.  Probability  of  Corrosion  Detection  During  a Periodic 
Inspection 


6 . Repair  Element  to  Original  Strength  (Block  6) 

When  a defect  is  detected,  the  logic  first  determines  whether 
an  element  modification  is  pending.  If  it  is,  the  modification  is 
installed,  and  a new  fatigue  life  for  that  individual  element  is 
determined  by  applying  the  Monte  Carlo  method  to  the  distribution 
previously  defined  in  Block  1.  The  logic  in  Block  8 determines  the 
actual  average  fatigue  life  of  the  given  element,  when  the  decision 
is  made  to  modify  the  element. 

If  an  element  modification  is  not  pending,  the  element  is 
restored  to  its  original  actual  average  fatigue  life,  and  the 
fatigue  life  of  the  individual  element  is  determined  by  applying 
the  Monte  Carlo  method.  If  an  element  has  multiple  defects  when 
repaired,  these  defects  are  also  corrected,  even  if  they  were  not 
detected  during  the  original  inspection.  It  is  assumed  that  once 
one  defect  is  found,  the  element  will  be  carefully  reinspected  and 
all  other  existing  defects  will  be  found. 

7 . Spec  ial  Inspection s_.  Increase  Inspection  Frequency  (Block  7) 

The  decision  to  conduct  a special  inspection  and/or  increase 
the  periodic  inspection  frequency  for  each  aircraft  in  the  fleet  is 


25 


based  on  the  size  of  the  previously  detected  defects.  If  a struc- 
tural failure  occurs,  fail-safe  damage  occurs,  or  if  an  clement  has 
a crack  whose  propagation  would  lead  to  a one -half  strength  reduc- 
tion before  the  next  inspection,  then  both  the  special  inspection 
and  the  increased  periodic  inspection  frequency  are  scheduled. 

This  scheduling  is  also  effected  if  the  sum  of  the  percentages  of 
strength  reductions  due  to  defects  in  all  aircraft  of  the  fleet 
exceeds  20  percent  of  the  average  fleet  strength. 

Conducted  immediately  after  it  is  called  for,  the  special 
inspection  is  considered  complete  when  all  aircraft  in  the  fleet 
have  been  inspected.  Also  instituted  immediately  after  it  is 
called  for,  the  increased  frequency  of  inspection  remains  in  effect 
until  a modification  is  required  as  indicated  by  service  experience 
or  fatigue  testing.  As  each  aircraft  has  the  modification  in- 
stalled, the  original  inspection  frequency  is  resumed  on  an  indi- 
vidual basis. 

8 . Develop  Modifications  Because  of  Service  Experience 

(block  8) 

Modifications  suggested  because  of  service  experience  are 
initiated  only  after  weighing  the  one-time  cost  of  modification 
against  the  recurring  costs  of  an  increased  inspection  frequency 
and  of  repairing  elements,  some  repeatedly.  SAIF  11  determines  which 
of  the  two  costs  is  less  and  selects  the  course  of  action  associ- 
ated with  the  lesser  cost.  This  comparison  is  illustrated  in 
Figure  1,3. 


26 


Additional  modifications  may  also  be  warranted  if  a previous 
modification  sustains  defects  while  in  service.  The  logic  for  an 
additional  modification  is  based  on  the  same  type  of  cost  compari- 
son discussed  above.  The  cost  of  inspections,  repairs,  and  modi- 
fications is  based  on  a study  presented  at  an  ATA  Maintenance 
Conference  and  documented  in  Reference  11. 

Once  the  decision  has  been  made  to  develop  a modification,  the 
logic  determines,  according  to  simulation  input  data,  whether  the 
modification  had  been  fatigue  tested  before  its  incorporation  in 
the  fleet.  If  the  modification  had  been  tested,  the  actual  average 
fatigue  life  of  the  modified  element  is  considered  to  be  equal  to 
the  fatigue  life  predicted  in  Block  1 for  the  original  design.  If 
the  modification  had  not  been  tested,  the  predicted  average  fatigue 
life  of  the  modified  element  is  considered  to  be  equal  to  the 
fatigue  life  predicted  in  Block  1 for  the  original  design,  and  the 
actual  average  fatigue  life  of  the  modified  element  is  determined 
from  Figure  S similarly  as  the  actual  average  fatigue  life  of  the 
original  element  was  determined. 

After  the  actual  average  fatigue  life  of  the  modified  element 
has  been  determined,  each  modified  element  has  a fatigue  life 
assigned  when  it  is  installed  in  an  aircraft. 


V.  PARAMETRIC  STUDY 
1 . Background 

As  discussed  earlier,  the  major  advantage  of  a simulation  is 
that  it  permits  study  of  the  real  system  without  actual  modifica- 
tion of  that  system  in  any  way.  For  many  real  systems,  major 
experimentation  involves  very  high  risks.  The  SAIFE  simulation 
permits  experimentation  with  an  aircraft  inspection  program 
without  jeopardizing  the  actual  fleet.  Various  inspection  pro- 
gram parameters  can  be  modified,  and  the  corresponding  effect  on 
aircraft  safety  observed.  While  there  are  many  variables  by 
which  aircraft  safety  can  be  gauged,  structural  element  failure 
rate  is  the  most  rc/caling. 

Ideally,  failure  rate  is  calculated  directly  from  observed 
failures.  Consider  n aircraft  placed  in  service  with  a common 
retirement  life  t^et.  Assume  that  r failures  are  observed  with 
r < n,  and  that  trie  observed  failure  times  are  t^  < tj  < t3 

< . . . < tret-  Then  the  failure  rate,  X,  can  be  calculated  by 


X 


r 

T 


(17) 


where  T,  the  accumulated  service  life  is 


T 


I t.  ♦ (n  - r)  t 
ial 


(18) 


To  run  the  SAIFE  program  with  all  of  the  defined  structural 
elements  in  the  aircraft  requires  a great  deal  of  computer  time. 
Thus,  any  extensive  parametric  study  will  be  very  costly  from  a 
computer  standpoint.  An  economical  alternative  is  to  run  samples 
of  elements  from  each  of  the  element  types.  But,  sample  runs 
normally  result  in  no  structural  failures  appearing  in  the  out- 
put. This  makes  it  impossible  to  calculate  failure  rate  direct- 
ly. However,  there  are  statistical  reliability  techniques  by 
which  the  failure  rate  can  be  estimated. 

2 • Estimation  Technique 

Recall  the  general  expression  for  the  reliability  of  a 
system 


R(t)  = e'/X (t)dt 


(19) 
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where  R(t)  = the  reliability  or  probability  of  survival 
of  the  system  through  time  t. 

X C t ) - the  hazard  rate,  or  probability  that  a failure 
will  occur  in  the  next  instant  of  time  assum- 
ing previous  survival 

For  most  systems,  failure  is  a reflection  of  individual  part 
failure.  Known  as  a serial  reliability  configuration,  it  can  be 
represented  as 


Rs(t')  = R : ( t ) • R2(t)  • ....  • Rn(t) 
where  Rg(t)  53  the  series  (system)  reliability 

f*  h 

R.(t)  = probability  of  surviving  the  itn  failure 
mode  through  time  t 

This  technique  can  be  applied  to  a fleet  of  aircraft  to 
estimate  the  aircraft  failure  rate  for  the  fleet.  Consider  the 
fleet  as  the  system  under  consideration  with  each  aircraft  in  the 
fleet  representing  a failure  mode.  Let  P(  be  the  probability  of 
survival  of  the  i™  aircraft  Through  the  time  interval  of  inter- 
est. Then  the  probability,  Rs(t),  of  there  being  no  structural 
failures  throughout  the  fleet  is 


n 

R_(t)  - n P.  (20) 

5 i-1  1 

where  Rg ( t ) = fleet  (system)  reliability 

P^  = reliability  of  i*'1  aircraft 

n - number  of  aircraft  in  the  fleet 

Recall  that  fleet  reliability  can  also  be  expressed  by  the  gen- 
eralized reliability  equation 

Rg(t)  - 0“  /M  t)  dt  (2J) 


If  it  can  be  assumed  that  the  hazard  rate  of  our  system  now 
remains  constant  over  a practical  interval  of  time,  and  that 
X ( t ) = = constant,  expected  number  of  random  failures  per  unit 

of  operating,  i.e.,  the  failure  rate,  then  Equation  (21)  can  be 
expressed  as 
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(22) 


Rs(t)  » e"*** 

where  As  s=  constant  element  failure  rate  for  the  fleet 
t = total  flight  hours  for  the  fleet 
liquation  (22)  can  then  be  solved  for  As. 

ln[R  ,(t)] 


That  As  is  constant  is  not  an  unwarranted  assumption  when 
the  fleet  is  considered  to  be  a single  complex  system  with 
a constant  failure  rate  regardless  of  the  failure  pattern 
of  individual  aircraft.  The  mixing  of  part  ages  when  indi- 
vidual elements  are  replaced  or  repaired  causes  the  fleet 
over  a period  of  time  to  approach  a stable  state. 


Next,  the  average  element  failure  rate  for  a given  element 
type  can  be  formed . 


m' 


(24) 


where  Ag  = average  element  failure  rate  for  a given  element 
type 

+■  h 

As,  = failure  rate  for  Y sample  element  from  a given 
K element  type 

in  = number  of  sample  elements  from  a given  element 
type 


and  the  element  type  failure  rate  is  then 


A 


sT 


E 


U 


A 


(25) 


where  = element  type  failure  rate 

u = number  of  elements  in  population  for  a given 
element  type 
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The  estimated  aircraft  failure  rate  for  the  fleet  can  now  he 
calculated . 


where 


A/C  failure  rate 


w 


(20) 


w 


element  type  failure  rate  for  j ^ element  type 
number  of  element  types  in  an  aircraft 


Initial  use  of  the  foregoing  feature  indicated  that  ' ery  long 
cracks  resulted  in  pi  values  — *.  1.0  and  Rs  (t)  —4.  0.  When 

used  in  equation  (23)  this  resulted  in  unrealistically  high  Xs 
values.  Consequently  for  the  AFS-510  demonstration  described 
in  Book  Two  of  Volume  IV,  this  feature  in  the  program  was 
changed  as  described  below. 


2.  Consider  the  fleet  of  aircraft  a system  with  constant, 
failure  rate  and  multiple  failure  modes,  liaeh  aircraft  in 
the  fleet  represents  a failure  mode.  Then,  R(t),  the  fleet, 
reliability  is 


n 

R(t)  = n P.  (27) 

i = l 1 


where  P^  = probability  of  surviving  the  i failure  mode 
or  non-failure  of  the  i™  aircraft 

n = number  of  failure  modes  or  aircraft  in  the 
the  fleet 


While  the  failure  rate  for  each  failure  mode  is  not  constant, 
the  assumption  of  constant  failure  rate  for  the  fleet  allows 
us  to  write  directly  from  probability  theory  the  following, 


R(t) 


n 

n 

i = l 


P.  * 

1 


-At 


(28) 


where  A is  the  constant  fleet  failure  rate.  liquation  (28) 
is  easily  solved  for  X, 


X 


n 

JLn  [ n 
i = t 


t 


V 


(29) 
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Summing  the  is  not  strictly  correct  since  it  is 
possible  that  the  sum  will  be  greater  than  one,  which  vio- 
lates the  definition  of  a probability  function. 

However,  if  one  chooses  to  call  the  P^  the  probable 
number  of  failures  per  aircraft  in  the  fleet,  then 

summing  them  will  yield  the  probable  number  of  failures  in 
the  fleet  for  a single  SAIFE  run.  To  calculate  failure  rate, 
the  accumulated  exposure  time  is  required.  Simply  using  the 
number  of  aircraft  multiplied  by  the  aircraft  retirement  life 
overestimates  the  exposure  time  and  underestimates  the  fail- 
ure rate.  Direct  calculation  of  failure  rate  is 


A 


A/C  failure  rate 


(301 


where  r is  the  number  of  failures  and  T,  the  accumulated  ex- 
posure time,  is 


r 

I 

i=l 


fci  + 


(n  - r)  t 


ret 


(31) 


where  t.  = it*1  failure  time 

n = number  of  aircraft  in  fleet 
tret  “ aircraft,  retirement  life 

It  is  easily  seen  that,  the  error  introduced  becomes  greater 
as  r increases  or  the  t.  decreases  but  this  is  small  and  can 
be  neglected.  1 

3 • Output 


The  original  standard  SAIFE  outputs  are  shown  in  Tables 
1 and  2.  To  enhance  the  program's  parametric  study  capability, 
these  two  outputs  have  been  expanded  as  shown  in  Tables  3 and  4. 
Note  in  Table  3,  that  for  each  crack  that  occurs  in  a particular 
element  during  the  sample  run,  the  aircraft  number,  the  airframe 
flight  hours,  the  crack  length,  and  its  corresponding  1-Pj  are 
printed.  The  aircraft  number  for  each  corrosion  or  production 
defect  that  occurs  is  printed.  The  estimated  element  failure 
rate,  As , as  calculated  by  Equation  [23)  is  also  printed. 


In  Table  4,  the  element  summary  for  a particular  element 
type,  the  additional  output  consists  of:  the  estimated  clement 
type  failure  rate,  Asp,  as  calculated  by  Equation  (25),  the 
sample  crack  length  mean  and  standard  deviation  used  to  define 
the  log-normal  distribution  of  crack  lengths,  and  the  crack 
length  vs  1-Pj  curve  fit  constants. 
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While  the  outputs  shown  in  Tables  3 and  4 are  adequate  for 
i identifying  trends,  a thorough  analysis  of  some  parametric  mod  i - 

Ifications  or  of  a particular  feature  of  a particular  run  may 
require  a more  complete  service  history  of  selected  elements 
'■  and  aircraft.  This  service  history  is  available  for  every 

element  in  the  aircraft  and  every  aircraft  in  the  fleet.  It 
consists  of  every  structurally  significant  event  that  occurs 
f during  the  simulation.  It  is  so  voluminous,  however,  that  this 

p long  list  history  should  be  output  for  only  selected  aircraft. 

V'  The  aircraft  of  interest  are  selected  from  the  standard  output., 

[:  and  the  simulation  is  run  a second  time  for  specific  elements 

with  the  long  list  option  in  effect.  This  means  that  the  two 
[;!  runs  must  be  identical.  That  is,  the  random  number  generators 

must  deliver  the  same  sequences  of  numbers  each  time.  To 
, avoid  having  to  run  all  the  elements  a second  time,  just  to 

see  a long  list  of  one  or  two  elements,  the  program  permits  the 
[■;  user  to  input  the  random  number  generator  seeds  for  each  element 

s of  interest. 


TABLli  3.  EXPANDED  SAIFE  OUTPUT  FOR  AN  INDIVIDUAL  ELEMENT 


AIRCRAFT  TYRF.I  HYBRID 

number  or  *iRc»*rt  in  fleeti  soe  aircraft  service  urn  »oooo  hours 

STRUCTURAL  ELEMENT  I FUS-MFR-SOT- 1 020 

RREQ1CTED  AVERAGE  IA1IOUE  LIFE'  1975*0  HOURS  ACTUAL  AVERASE  FATIGUE  LIFE!  ?•>  1 0 A«»  HOURS 

FAUIiul  TEST  LIFE!  JAJ03A  HOURS 

NUMBER  AND  UNI  TO  INITIATION  OF  AIRCRAFT  DEFECTS 

FIHAT  CRACK  CORROSION  SERVICE  OAHAOC  PRODUCTION 

OCCURRF  NCES  JO  J * 

MINI  HUS  I l*RTS  0 J - 

MAAIuMSI  SA*7?  0 0 _ 

A VU I HR SI  • *2 TOT  0 0 

NUMBER  ANO  LENGTH  OF  CRACKS  DETECTED  AT  EACH  LEVEL  OF  INSPECTION 
a-level  r-level  C-LEVEL  O-LtVEL  SOCIAL 

OCLURRFNCES  1 4 . 0 „ C n ° 

HINI1N1  11. JR  0.  O.  o.  • 

MAX  1 1 N I 1 1.39  0.  2‘  « n* 

AVUIINI  11.39  0.  0-  •* 

NUMHFR  AND  AREA  OF  CORROSION  DEFECTS  DETECTED  AT  EACH  LEVEL  Of  INSPECTION 

A-LEVEL  B-LEVEL  C-LEVtL  O-LEVEL 

OCCURRENCES  0 0 0 0 . ° 

MINISO.INI  0.  0.  J*  ‘ 

maxiso.ini  o.  o.  2* 

AVOISO.INI  0.  0.  ••  0 

INSPECTION  INJERVALSIHHSI  "°°  N0  SAMPLING 

INITIAL  ?S  ECO  J 000  EOOO  0 

,NT  £ RC«  E12S  3000  0 J 

i JS  ?00  12AA  *500  0 IE 

l Is  ? 00  IAEA  6750  0 9 

‘ « poO  1602  >»l”  0 1 

. PS  POO  1 B02  1SIRS  0 A 

? is  POO  2253  UVSA  0 7 

' is  200  2B16  23730  0 R 

“ is  200  3520  2«A3  0 9 

CRACK  LENGTHS  AND  CORRESPOND! NO  CUMULATIVE  PROBABILITY  OF  FAILURE  t.nuRE 

AIRCRAFT  NO.  FLT.  HOURS  CHK.L01.  P"OR.  OF  failuml 

2.1  ooogo  * 

JT1  55253  W.39 

*77  60  0(10  .12  l,JF  "" 

NUMBER  OF  SPECIAL  INSPECTIONS  CONOUCTEOI  0 
NUMBER  OF  STRUCTURAL  MODIFICATIONS!  0 

FINAL  ACTUAL  AvfRAOE  NODIFIFD  FATIGUE  LIFE!  251039  HOURS 
NUMBER  of  aircraft  MOOIFIFO  IN  SERVICE  I 0 

ESTIMATED  RESIDUAL  STRENOTM  FOU.LS  FAIL-SAFE  STRENGTH 

a.rcrafTS™  S!  hours  mrcraft  no. 


T I ME 


?600 
5 <.00 

1A10D 

26975 

6b019 
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TABLE  4.  EXPANDED  SAIFE  OUTPUT  FOR  AN  ELEMENT  TYPE 


AIRCRAFT  TrPE)  HYRRIO 

NUMBER  OF  AIRCRAFT  IN  FLEET  I *>00  AIRCRAFT  SERVICE  LIFE  I 60000  HOURS 


SUMMARY  OF  STRUCTURAL  ELEMENT)  PUS-MFH-HOT 
NUMBER  ANO  TIME  VO  INITIATION  OF  AIRCRAFT  OEFLCTS 


FIRST  CRACK 

CORROSION 

SERVICE 

OAMAAE 

PRODUCTION 

DFFEflS 

OCCURRENCES 

7 

0 

0 

0 

HIN(HRS) 

1**73 

0 

0 

MAA (Hftfi) 

S»W72 

0 

0 

avO(hRS) 

*9766 

0 

0 

NUMBER  AND  LENGTH 

OF  CRACKS  DETECTED  AT  EACH 

LEVEL 

OF  INSPECTION 

A ••LEVEL  fl 

-LEVEL 

C -LEVEL 

O-LEVEL 

SPECIAL 

occunwENces 

1 

0 

0 

0 

0 

MIN  1 IN) 

11.39 

0. 

0. 

0. 

0 i 

MAAI 1W> 

11.39 

0. 

0. 

0. 

0. 

AVO( IN) 

11.39 

0* 

0. 

0. 

o* 

NUMBER  AND  AREA  OF  CORROSION  DETECTS 

DETECTED  AT  EACH  LEVEl  OF  INSPECTION 

A-lEVEL  9 

-LEVEL 

C-UVEL 

o-level 

SPFPIAL 

OCCURRENCES 

0 

0 

0 

0 

1) 

MIN(SO.IN) 

0, 

0. 

0. 

0. 

ft. 

HA* (5U . IN) 

0 « 

0. 

0. 

0. 

0. 

AVO(SO.IN) 

0. 

ft, 

0. 

0. 

ft. 

l NSf'EC  T I ON  INTERVALS  IHHS  ) 

INITIAL 

25 

200 

xooo 

2000 

SHORTEST 

25 

200 

loco 

2000 

LONG  E Lit 

25 

?oo 

3520 

29063 

NUMBER  OF  SPECIAL 

INSPECTIONS  CONDUCTED) 

0 

NUMBER  OF  STRUCTURAL  MODIFICATIONS)  1 

NUMPUft  OF  AIRCRAFT 

MODIFIED  IN  SERVICE) 

0 

ESTIMATED  ELEMENT 

TYPE  FAILURE  HATE  1 3.A2E-12/HH. 

SAMPLE  CRK.  LOT 

• MEAN(IN)  2.37 

SAMPLE  STD 

CRK « LOT.  VS 

PROBABILITY  CURVE  FIT  CONST) 

Ah  0. 

R ■ -.0000 

STRUCTURAL  FAILURES 

RESIDUAL 

STRENOTM  fOUALS  FAIL- 

-SAFE  STRENGTH 

FLT « HOURS  STA.  NO.  AIRCRAFT  NO.  FLT.  HOURS  STA.  NO. 


AIRCRAFT  NO 


VI.  SUMMARY  AND  CONCLUSIONS 

(1)  Although  the  SAIFE  simulation  logic  for  evaluating  pro- 
posed inspection  programs  is  very  complex,  it  can  indi- 
cate the  number,  extent,  flight  time,  and  criticality 
of  the  defects  that  would  occur  in  a given  inspection 
program. 

(2)  Except  for  limited  data  on  wide-body  aircraft,  data  de- 
tailing the  service  years  and  flight  hours  of  the  U.S. 
commercial  transport  fleet  is  currently  available  to  only 
the  air  carriers  or  the  airframe  manufacturers. 

(3)  SAIFE  is  a flexible  program  that  can  be  used  to  evaluate 
the  inspection  requirements  for  an  entire  aircraft,  a 
large  segment  of  an  aircraft,  or  a single  element. 

(4)  The  information  available  on  MRR/SDR's  is  useful  for 
evaluating  the  rate  of  occurrence  of  production  defects, 
service  damage,  and  corrosion.  However,  the  quantitative 
engineering  type  of  data  required  for  an  in-depth  analy- 
sis of  these  parameters  is  currently  lacking. 

(5)  Because  of  the  flexibility  provided  by  the  input  param- 
eters, SAIFE  can  be  used  to  evaluate  inspection  programs 
on  both  fail-safe  and  safe-life  design  aircraft. 


REFERENCES 


1.  Anderjaska,  A. Li.,  A PLAN  FOR  DEVELOPING  AN  AIRCRAFT  STRUCTURAL 
INSPECTION  PROGRAM,  u master's  thesis  submitted  to  the  faculty 
of  the  School,  of  Engineering  and  Applied  Science  of  the  George 
Washington  University,  February  1973. 

2.  Raithby , K.D.,  A COMPARISON  OF  PREDICTED  AND  ACHIEVED  FATIGUE 
LIVES  OF  AIRCRAFT  STRUCTURES,  Royal  Aircraft  Establishment, 
Technical  Note  No.  Structures  301,  Ministry  of  Aviation, 
London,  July  1961. 

3.  Freudenthal , A.M.,  THE  EXPECTED  TIME  TO  FIRST  FAILURE,  Ohio 
State  University  Research  Foundation,  Technical  Report  AP'ML- 
TR-66-37,  Air  Force  Materials  Laboratory,  Wright -Patterson 
AFB,  Ohio,  February  1966. 

4.  Abelkis , P.R.,  FATIGUE  STRENGTH  DESIGN  AND  ANALYSIS  OF  AIR- 
CRAFT STRUCTURES,  PART  1,  SCATTER  FACTORS  AND  DESIGN  CHARTS, 
Douglas  Aircraft  Company,  Inc.,  Technical  Report  AFTDL-TR-66- 
197,  Air  Porce  Flight  Dynamics  Laboratory  (FDTR) , Wright  - 
Patterson  AFB,  Ohio,  June  1967. 

5.  Stone,  M.E. , and  Heap,  H.F.,  DEVELOPING  THE  DC-10  STRUCTURAL 
INSPECTION  PROGRAM,  presented  at  the  7th  Annual  FAA  Inter- 
national Aviation  Maintenance  Symposium,  Oklahoma  City, 
Oklahoma,  December  1971. 

6.  BOEING  747  FATIGUE  INTEGRITY  PROGRAM,  REVISION  1,  The  Boeing 
Company,  747  Division,  Everette,  Washington,  January  1971. 

7.  Shaffer,  I.S.,  and  Sebastian,  J.C.,  CORROSION  AND  FATIGUE 
EVALUATION  OF  SPAR  CAP  SPECIMENS  FROM  HU- 16  WINGS,  Naval  Air 
Engineering  Center;  Report  No.  NAEC-AML-2538 , Coast  Guard 
Aircraft  Repair  and  Supply  Center,  Elizabeth  City,  North 
Carolina,  U.S.  Coast  Guard  Requisition  No.  Z70099  -6081  - 07 71  , 
September  1967. 

8.  Eggwertz , S.,  and  Lindsjo,  G.,  STUDY  OF  INSPECTION  INTERVALS 
FOR  FAIL-SAFE  STRUCTURES,  The  Aeronautical  Research  Institute 
of  Sweden,  FAA  Report  120,  Stockholm,  1970,  AD  723111. 

9.  Excerpts  from  STRESS-CORROSION  CRACKING  RESISTANCE  OF  HIGH- 
STRENGTH  ALUMINUM  ALLOYS  AND  HIGH-STRENGTH  FASTENER  MATERIALS, 
MC1C  73-19,  a paper  presented  at  the  Tri-Service  Conference  on 
Corrosion,  Houston,  Texas,  December  1972. 

10.  Hunter,  P.A.,  and  Fetner,  M.W. , AN  ANALYSIS  OF  VCH  DATA 
COLLECTED  FROM  ONE  TYPE  OF  FOUR-ENGINE  TURBOJET  TRANSPORT 
AIRPLANE,  NASA  Technical  Note  D-4529,  Langley  Research  Center, 
Hampton,  Virginia,  May  1968. 

11.  Excerpts  from  the  Air  Transport  Association  of  America  (ATA) 
Annual  Engineering  and  Maintenance  Conference,  held  in 
Phoenix,  Arizona,  September  1968. 


37 


BIBLIOGRAPHY 


Davidson , J.R.,  RELIABILITY  AND  STRUCTURAL  INTEGRITY,  NASA- 
Langley  Research  Center,  Technical  Note  X-71934,  National  Aero- 
nautics and  Space  Administration,  Washington,  D.C.,  November  1973. 

DC-8  INSPECTION  AND  MAINTENANCE  PROGRAM,  VOLUME  ONE,  Air  Transport 
Association  of  America  (ATA) , New  York  Avenue,  N.W.,  Washington 
D.C.,  October  1957. 

liggwertz , S.,  INSPECTION  PERIODS  DETERMINED  FROM  DATA  OF  CRACK 
DEVELOPMENT  AND  STRENGTH  REDUCTION  OF  AN  AIRCRAFT  STRUCTURE  USING 
STATISTIC  ANALYSIS,  The  Aeronautical  Research  Institute  of  Sweden, 
Wright  Air  Development  Division  of  the  Air  Research  and  Develop- 
ment Command,  U.S.  Air  Force,  June  1961,  AD-631-351. 

FAA  STATISTICAL  HANDBOOK  OF  AVIATION,  1973  Edition,  Department  of 
Transportation,  Federal  Aviation  Administration,  Washington,  D.C. 

FAA  STATISTICAL  HANDBOOK  OF  AVIATION,  1970  Edition,  Department  of 
Transportation,  Federal  Aviation  Administration,  Washington,  D.C. 

Gould,  A.J.,  CORROSION  FATIGUE,  FREQUENCY,  Session  4,  Paper  2: 
TEMPERATURE  AND  ENVIRONMENT,  presented  at  the  International  Con- 
ference on  Fatigue  of  Medals,  London,  September  1956. 

Harmsworth,  C.L.,  EFFECT  OF  CORROSION  ON  THE  FATIGUE  BEHAVIOR  OF 
2024-T4  ALUMINUM  ALLOY,  ASD  Technical  Report  61-121,  Directorate 
of  Materials  and  Processes,  Aeronautical  Systems  Division,  Wright - 
Patterson  AFB , Ohio,  July  1961. 

Lundberg,  B.K.O.,  and  Eggwertz,  S. , A STATISTICAL  METHOD  FOR  FAIL- 
SAFE DESIGN  WITH  RESPECT  TO  AIRCRAFT  FATIGUE,  THE  REDUCED  STATIC 
STRENGTH  CRITERION  APPLIED  TO  A DIFFUSE  WING  STRUCTURE,  The  Aero- 
nautical Research  Institute  of  Sweden,  FAA  Report  No.  99,  pre- 
sented at  the  ICAS  Congress  in  Zurich,  September  1960. 

Whittaker,  I.C.,  and  Saunders,  S.C.,  EXPLORATORY  DEVELOPMENT  ON 
APPLICATION  OF  RELIABILITY  ANALYSIS  TO  AIRCRAFT  STRUCTURES  CON- 
SIDERING INTERACTION  OF  CUMULATIVE  FATIGUE  DAMAGE  AND  ULTIMATE 
STRENGTH,  The  Boeing  Company,  Technical  Report  AFML-TR-  72 - 2 83  , 

Air  Force  Materials  Laboratory,  Air  Force  Systems  Command, 
Wright-Patterson  AFB,  Ohio,  January  1973. 


38 


